VacPartsWarehouse.com
Disclosed May 20, 20264 months ago23,820 affectedConfirmed
What is known
| People affected | 23,820 (as reported by the organization) |
|---|---|
| Disclosed | May 20, 2026 |
| Discovered | Apr 22, 2025 |
| Happened | Oct 31, 2025 |
| Attack | Hacking |
| Data exposed | Payment cards, Financial, Names |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: VacPartsWarehouse.comoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: VacPartsWarehouse.comatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: VacPartsWarehouse.comjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005054: VacPartsWarehouse.comoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: VacPartsWarehouse.comago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: VacPartsWarehouse.comin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 20 | |
| Washington AGresidents of WA | May 20 | 695 |
| Oregon DOJresidents of OR | May 20 | 23,820 |
| Vermont AGresidents of VT | May 20 | 139 |
| Indiana AGresidents of IN | May 20 | 536 |
| Texas AGresidents of TX | May 22 | 1,559 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · data_types: [] to ["payment-card","financial","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 23820 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-04-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.